$ rpki-client -vvf rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft File: 8BBABE3D733222C2B6A217449635616F4F2C9625.mft (raw, json) Hash identifier: N+1uWEhxy7m08Dy2mmQ7bhrXH/DnL9fTSw7xFoQLUd8= Subject key identifier: 41:03:83:10:89:EB:D2:66:31:5B:2F:A9:28:FD:1A:01:AE:50:A3:59 Authority key identifier: 8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 Certificate issuer: /CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Certificate serial: 2F3C7A5BF9E38CCB0C7FC12ECAF1FCEF436A0E7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:00:30 +0000 Manifest this update: Tue 02 Jun 2026 16:55:30 +0000 Manifest next update: Wed 03 Jun 2026 19:36:30 +0000 Files and hashes: 1: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: 3IjI2krzhLJYlKJkWyMM6q/EfNey4aUG89WZvwYr9zI=) 2: 8BBABE3D733222C2B6A217449635616F4F2C9625.crl (hash: AKNRagKIsPLqugOuyIWiovXSmzgVugpm078/9liFtC0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 19:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3c:7a:5b:f9:e3:8c:cb:0c:7f:c1:2e:ca:f1:fc:ef:43:6a:0e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBABE3D733222C2B6A217449635616F4F2C9625 Validity Not Before: Jun 2 16:55:30 2026 GMT Not After : Jun 3 19:36:30 2026 GMT Subject: CN=4103831089EBD266315B2FA928FD1A01AE50A359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a8:91:42:68:af:5c:cb:02:7e:f2:93:81:08: f3:03:0e:3c:8b:1d:a5:ae:02:75:aa:1d:c6:c6:bb: 2e:c8:87:ec:93:00:ff:5d:86:16:07:54:4b:d7:e3: 74:b6:ee:28:43:1b:0d:1f:2f:ad:40:cc:cc:8c:3e: 19:d8:69:d5:bd:56:fd:c0:9d:3b:b9:2c:0e:41:fe: da:2e:38:e8:c4:e6:3c:54:5b:35:8e:22:ba:60:a1: e5:6b:e0:e2:c0:3f:c6:01:fa:9c:6f:fc:8c:f6:62: f7:96:bb:9f:00:6a:81:c2:32:25:0e:5b:e7:ba:db: 5d:af:87:d6:03:36:66:f1:fa:b4:37:b1:02:9a:20: 0f:57:86:02:3e:a6:be:cf:fb:13:37:ae:63:cf:8a: 31:65:25:05:d3:3c:f9:81:18:32:c0:35:c9:b6:97: 11:97:6b:76:b0:af:fe:d1:4d:41:9b:28:5c:b0:eb: 5e:20:07:2f:42:fe:36:13:58:60:57:53:0a:6a:c0: ca:93:cf:5d:f9:65:bc:b3:30:9f:99:a1:b7:b5:59: 70:a9:f3:75:8d:0b:c2:46:77:49:c9:7a:e2:03:75: 55:45:0a:30:18:74:54:d3:68:f0:c0:5d:24:83:b5: c7:0b:0e:d7:77:fb:69:9c:f5:f8:ba:5c:44:2b:ca: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:03:83:10:89:EB:D2:66:31:5B:2F:A9:28:FD:1A:01:AE:50:A3:59 X509v3 Authority Key Identifier: keyid:8B:BA:BE:3D:73:32:22:C2:B6:A2:17:44:96:35:61:6F:4F:2C:96:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BBABE3D733222C2B6A217449635616F4F2C9625.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/8BBABE3D733222C2B6A217449635616F4F2C9625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4e:25:5f:d5:73:58:d5:e5:f3:1a:c0:ce:39:16:10:23:59: 4c:79:cc:eb:c7:1a:f3:a0:64:cb:8a:80:91:95:48:c7:18:50: 8d:bb:2c:7b:7b:01:f1:3b:2b:3f:e6:11:42:29:39:3b:1e:9e: 06:dd:29:d7:ac:de:ba:72:b0:61:33:a6:af:76:66:b6:5d:13: f7:c3:d8:49:95:91:d6:3c:6b:f3:25:2c:81:63:58:1a:48:99: d0:aa:6e:7f:4f:18:88:63:11:b2:b9:0a:8e:94:3c:2e:1f:bd: 80:ee:34:2d:ff:57:7a:1a:0f:cb:9d:aa:e0:5e:e7:a6:b3:ce: 0c:07:c1:1d:a5:67:42:7f:78:ea:0c:8c:a1:7d:9d:de:c9:88: 13:d1:06:ea:c5:bc:6f:fd:26:ef:e3:14:b5:e7:2b:5f:73:5c: b0:b2:e9:18:65:c4:08:67:f1:21:31:50:b8:5b:e7:10:26:cd: b8:3c:5a:91:ed:d8:15:e8:9b:a4:33:6c:37:af:a3:6b:fb:33: 7e:fe:a1:e2:26:74:99:15:43:8a:c2:49:66:67:51:63:e7:56: 05:0e:32:d1:cf:15:45:87:2c:d9:60:bb:41:a1:e6:bf:dc:b6: 69:15:82:fe:8f:99:6d:bc:5e:5d:93:9f:4f:28:ac:2b:a4:c5: 10:9a:99:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzx6W/njjMsMf8EuyvH870NqDn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0 RjJDOTYyNTAeFw0yNjA2MDIxNjU1MzBaFw0yNjA2MDMxOTM2MzBaMDMxMTAvBgNV BAMTKDQxMDM4MzEwODlFQkQyNjYzMTVCMkZBOTI4RkQxQTAxQUU1MEEzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkqJFCaK9cywJ+8pOBCPMDDjyL HaWuAnWqHcbGuy7Ih+yTAP9dhhYHVEvX43S27ihDGw0fL61AzMyMPhnYadW9Vv3A nTu5LA5B/touOOjE5jxUWzWOIrpgoeVr4OLAP8YB+pxv/Iz2YveWu58AaoHCMiUO W+e6212vh9YDNmbx+rQ3sQKaIA9XhgI+pr7P+xM3rmPPijFlJQXTPPmBGDLANcm2 lxGXa3awr/7RTUGbKFyw614gBy9C/jYTWGBXUwpqwMqTz135ZbyzMJ+Zobe1WXCp 83WNC8JGd0nJeuIDdVVFCjAYdFTTaPDAXSSDtccLDtd3+2mc9fi6XEQryr/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQQODEInr0mYxWy+pKP0aAa5Qo1kwHwYDVR0j BBgwFoAUi7q+PXMyIsK2ohdEljVhb08sliUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGFmMDAzMWUtMmE5ZS00N2NhLTkyODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3 MzMyMjJDMkI2QTIxNzQ0OTYzNTYxNkY0RjJDOTYyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkJBQkUzRDczMzIyMkMyQjZBMjE3NDQ5NjM1NjE2RjRGMkM5 NjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvOEJCQUJFM0Q3MzMyMjJDMkI2QTIxNzQ0OTYzNTYx NkY0RjJDOTYyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5OJV/Vc1jV5fMawM45FhAjWUx5zOvHGvOg ZMuKgJGVSMcYUI27LHt7AfE7Kz/mEUIpOTsengbdKdes3rpysGEzpq92ZrZdE/fD 2EmVkdY8a/MlLIFjWBpImdCqbn9PGIhjEbK5Co6UPC4fvYDuNC3/V3oaD8udquBe 56azzgwHwR2lZ0J/eOoMjKF9nd7JiBPRBurFvG/9Ju/jFLXnK19zXLCy6RhlxAhn 8SExULhb5xAmzbg8WpHt2BXom6QzbDevo2v7M37+oeImdJkVQ4rCSWZnUWPnVgUO MtHPFUWHLNlgu0Gh5r/ctmkVgv6PmW28Xl2Tn08orCukxRCamYk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:26:18 2026 by rpki-client